// LEGAL_TERMS
TERMS_READYTerms of service
Scan legit.Fix fast.
These Terms set the rules for using VibeLeak's public scanner, saved reports, exports, Trust Index features, account flows, and paid-product surfaces.
Last updated
2026 terms build
Scope
Scanner + account + index
Rule zero
Scan only permitted targets
Plain-English operator note
Use VibeLeak to improve sites you are allowed to test. Do not turn a passive public-surface scanner into a way to bother people, evade controls, or claim guarantees the product does not make.
01 / Core terms
Acceptance
By accessing or using VibeLeak, you agree to these Terms, the Privacy Policy, and any plan, checkout, or product-specific terms shown to you.
Service
VibeLeak provides public-surface website trust scans, findings, grades, saved reports, exports, badges, score-watch workflows, and public Trust Index features.
Accounts
You are responsible for keeping your account credentials and authentication methods secure. Notify us if you believe your account or scan links have been misused.
Results
Findings, scores, fixes, exports, and AI handoff files are informational. They help prioritize work, but they are not a penetration test, compliance certification, legal opinion, or guarantee that a site is secure.
Billing
Paid features, limits, prices, taxes, billing cadence, trials, renewals, and cancellations are governed by the terms presented at checkout or in the applicable order flow. Payment processing is handled by the processor presented at checkout.
Changes
We may update the service or these Terms. Continued use after an update means you accept the revised Terms for future use, unless applicable law requires another process.
02 / Permitted use
- Scan public URLs and domains you own, operate, administer, or are otherwise authorized to test.
- Use exported reports and remediation guidance to improve your own site, client site, or authorized project.
- Share saved scan links, badges, or Trust Index entries only when doing so does not misrepresent ownership, authorization, or security status.
03 / Prohibited use
- Do not scan private networks, localhost, internal hosts, cloud metadata services, targets you are not authorized to test, or URLs chosen to abuse redirects.
- Do not use the service to harass, overload, evade controls, scrape at high volume, probe non-public systems, or facilitate unlawful activity.
- Do not attempt to bypass rate limits, authentication, payment gates, export gates, anti-abuse controls, Trust Index verification, or domain privacy controls.
- Do not copy VibeLeak branding, UI, code, content, reports, or product data except as permitted by the service.
04 / Legal and product boundaries
Public listings
Trust Index visibility is a product feature, not an endorsement. A/S Hall of Fame entries require opt-in. Owner privacy requests require signed-in proof through DNS TXT or HTTPS well-known file verification.
Third-party services
The service depends on providers for hosting, auth, storage, payments, email, analytics, monitoring, and anti-abuse. Their terms and privacy practices may also apply where you interact with them.
Suspension
We may limit, suspend, remove, or refuse access to protect users, targets, infrastructure, legal obligations, or service integrity.
Liability
To the fullest extent permitted by law, VibeLeak is provided as-is and as-available. We are not liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for lost profits, lost data, or business interruption.
Indemnity
You agree to defend and hold VibeLeak harmless from claims arising from your unauthorized scans, unlawful use, misuse of results, breach of these Terms, or violation of third-party rights.
Law
Mandatory consumer, privacy, security, and platform rules may apply based on where you are located and how you use the service. Nothing in these Terms limits rights that cannot be waived by law.
05 / Contact, notices, and disputes
Contact VibeLeak at hello@vibeleak.app for account, billing, legal, privacy, or abuse notices. If a required legal notice method is shown in a signed order, invoice, or checkout flow, use that method for the related paid service.